CVE-2025-14205

MediumCVSS 5.4/10Last modified Oct 14, 2026

Description

A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membership_profile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/City/State results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

Vendor	Product	Versions
code-projects	Chamber of Commerce Membership Management System	1.0

References

https://code-projects.org/Product
https://vuldb.com/?ctiid.334648Permissions Required, VDB Entry
https://vuldb.com/?id.334648Third Party Advisory, VDB Entry
https://vuldb.com/?submit.700421Third Party Advisory, VDB Entry
https://www.yuque.com/u42535181/pm5nde/ky49h1xg6si9d3m8#zdDXXBroken Link

Timeline

Published: Dec 8, 2025
Last modified: Oct 14, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-142067.5A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the fil CVE-2025-142077.3A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. The impacted element i CVE-2025-142086.3A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_sett CVE-2025-142099.8A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.ph CVE-2025-14212.4Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might do CVE-2025-142109.8A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the f CVE-2025-142119.8A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functiona CVE-2025-142129.8A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the f CVE-2025-142138.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to th CVE-2025-142148.8A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /section_edit1.php. CVE-2025-142159.8A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The CVE-2025-142169.8A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewse